nginx: Listen for ACME challenges on port 80 too.

This should make Certbot renewals more reliable. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2020-04-23 15:45:32 -07:00 · 2020-04-23 15:45:32 -07:00 · 09ea778db1
parent 257a026f13
commit 09ea778db1
1 changed files with 6 additions and 1 deletions
--- a/puppet/zulip/templates/nginx/zulip-enterprise.template.erb
+++ b/puppet/zulip/templates/nginx/zulip-enterprise.template.erb
@ -3,7 +3,12 @@
 server {
    listen 80;
    listen [::]:80;
-    return 301 https://$host$request_uri;
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+
+    include /etc/nginx/zulip-include/certbot;
 }
 <% end -%>